Solved

Simple VLAN question ...

Posted on 2003-10-29
4
585 Views
Last Modified: 2010-04-11
hi,

I now have a flat L2 network which I plan to divide up by assigning VLAN 2 to finance, VLAN3 to HR, VLAN4 to Engineering... however, they all need to access a few servers (eg email) that should be accessible to all the VLANs - thus the server port would have VLAN2,3,4 configured.

Note that no L3 devices is required because the IP addressing remains in one subnet (eg. 10.10.10.x) for the whole company. This is to control broadcast domains, and improve security. My aim is improve security with the least disruption. Putting in a L3 device (such as a router-on-a-stick or L3 switch) would require to change IP addressing - which would probably be a major task by itself - looking at the number of clients to be changed.
 
Is this approach workable and recommended? What are your comments / suggestions / advise.. Thanks!!!

0
Comment
Question by:Haho
  • 2
  • 2
4 Comments
 
LVL 1

Author Comment

by:Haho
ID: 9647138
Fyi, I understand that without a L3 device, VLAN 2 users will not be able to talk to VLAN 3 users. That's why shared resources such as servers, gateways, printers, etc will belong to multiple VLANs.
 
0
 
LVL 7

Expert Comment

by:NicBrey
ID: 9648682
Answer is no.  It is not possible to have an access port on a switch be part of more than one VLAN. Only trunk ports can do that.
The whole idea of VLANs is to break up the broadcast domain on lan segments. Unfortunately, for your idea to work, you would have to get a layer 3 switch or router and redesign your addressing scheme.

Another option is to bridge the VLANs. Do that by putting a cross-over cable into a port on VLAN1 and VLAN2.  If you do this, you might as well not have VLANs though.  The only true solution is to have the VLANs in different networks/subnets and to route or layer3 switch between them.
0
 
LVL 1

Author Comment

by:Haho
ID: 9649577
Hi Nic,

I think the answer is "yes" ? - it is called "multi-VLAN port"
from the net, I found:
>>>
To assign a multi-VLAN port to a vlan, from interface configuration mode issue the command "switchport mode multi" followed by "switchport multi vlan v1 v2 ... vn" where "v1 v2 ... vn" is a list of vlan numbers. For example, to add port 13 to vlans 2, 3, and 6:

     switch#interface fastEthernet 0/13
     switch(config-if)# switchport mode multi
     switch(config-if)# switchport multi vlan 2 3 6

Comments?
0
 
LVL 7

Accepted Solution

by:
NicBrey earned 250 total points
ID: 9649924
Hi Haho,

Yes, that slipped my mind a bit....
The multi-VLAN port you talk about is like the trunk port that I mentioned earlier.  Ideally you will have all VLANs in different networks and the multi-VLAN port connects to a router on a stick like a trunk does.

VLAN assignments and Mutli-VLAN ports and trunking.
http://www.cisco.com/en/US/products/hw/switches/ps605/products_configuration_guide_chapter09186a008007d7dd.html#xtocid119665

Overlapping VLANs.
http://www.cisco.com/en/US/products/hw/switches/ps607/products_installation_and_configuration_guide_chapter09186a008007d32c.html#xtocid228683

Since you will have all PC's on one subnet, it will work because the link is not actually a trunked link - just carrying traffic for more than one VLAN. So yes, go ahead and try it...
0

Featured Post

New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now